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Please amend Paragraph as follows: 

40M8J Any reference herein to a computer means any personal computer, ATM, PDA, G2.5 
Mobile Device, G3 Mobile Device, or any device with a central processing unit ("CPU"). Any 
reference herein to a transaction means any financial transaction, remote Data Access procedure, 
or any interface transaction between a user and a system. The numbers on the various user 
interfaces and displays are merely exemplary and the use of characters, letters, colors and such 
may be used individually or in combination and still fall within the intended scope of the present 
invention. 

Please amend the Abstract as follows: 

A method and system for secure identification of a person in an electronic 
communications environment, wherein a host computer is adapt e d to b e abl e to communicates 
with a plurality of user-operated electronic devices, operat e d by th e us e r. Th e us e r is issued with 
a us e r cod e , known only to th e us e r and stor e d in the host oomputor. When the user is required to 
identify themselves to the host computer, the host computer generates a pseudo-random security 
string and applies a previously issued fe e user code to the psoudo random security string to 
generate a transaction code. The host computer also transmits the psoudo random security string 
to one of the electronic devices for display w hioh is display e d by th e e l e ctronic d e vic e to the 
user. The user applies the their known user code to the displayed psoudo random security string 
and determines the transaction code. The us e r e nt e rs th e transaction code is entered into an 
electronic device and th e e nt e r e d transaction code is th e n which transmits the transaction code 
transmitt e d baok to the host computer. Positive identification is achieved when the host 
computer determined transaction code matches the transaction code entered by the user. In 
addition, the system caneeuW employ a secure user code entry interface whioh would allow 
secur e for inputting ef the user code. 



In making the amendments set forth above, Applicant has taken care not to add new 

matter. 
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been fitted to a Gateway Server 2109 accessing a Database 21 1 L the Database 21 1 1 being 
protected bv a firewall 2115 . FIG. 21 assumes that the user 2101 has registered with the system 
and has the Pin Safe Interface applet 2123 on their compute r which allows the user 2101 to 
communicate with Authorization Server 2107 via the Internet 2113 using paths 2120. 2140. and 
2152 . To access information from the Database 21 1 1 the Authorization Server 2107 sends a new 
security string to the user's computer or G2 mobile phone 2104 via the Internet 21 13 or through a 
wireless connection 2151. The security string 2151 resides on the device 2104 until the user 2101 
wishes to access the Database 2111. 

[0142] The User 2101 sends his volatile TAC to the Authorization Server 2107 to confirm 
his/her identity. In the dual channel scenario the user obtains their TAC from the G2 mobile 
device 2104 via either visual extraction (using their PIN as a sequencer) or Smart PIN or 
standard inline memory module (" SIMM") extraction where the User 2101 enters their PIN into 
the device 2104 and the relevant TAC digits are displayed on the device 2104 screen. The TAC 
is then inputted into the user's computer (not shown). In the single channel scenario the user 
simply inputs their PIN into the Pin Safe interface 2123, The PIN is then converted into a TAC 
within the applet 2123 and transmitted via path 2120 to the Authorization Server 2107 



£ Please amend Paragraph [0l4p] as follows: 
[014^] FIG. 23 shows the Generic Integration Platform which displays the Authorization Server 
2307 inside a firewall 2315- 3244. The Authorization Server 2307 is connected to a Net Server 
23 1 7 and a host database 2311. The host database 23 1 1 may also be inside it's own firewall 
2316. 

Please amend Paragraph [0148] as follows: 

[0148] Any reference herein to a computer means any personal computer, ATM, PDA, G2.5 
Mobile Device, G3 Mobile Device, or any device with a central processing unit (" CPU"). Any 
reference herein to a transaction means any financial transaction, remote Data Access procedure, 
or any interface transaction between a user and a system. The numbers on the various user 
interfaces and displays are merely exemplary and the use of characters, letters, colors and such 
may be used individually or in combination and still fall within the intended scope of the present 
invention. 
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